$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft File: BA2WgwOzZPdyp1NXgiDTU34WFm4.mft (raw, json) Hash identifier: qo2xegkzvqQRpU9rTEvIWP1INzoRhtY1g5YHLj9JQ5k= Subject key identifier: 5F:1D:5B:B8:10:C5:13:1F:FB:E9:D1:36:96:A5:04:88:0E:5C:0D:20 Authority key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E Certificate issuer: /CN=040D968303B364F772A753578220D3537E16166E Certificate serial: 0430 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft Manifest number: 042B Signing time: Sun 19 Oct 2025 21:25:07 +0000 Manifest this update: Sun 19 Oct 2025 21:25:07 +0000 Manifest next update: Tue 21 Oct 2025 21:25:07 +0000 Files and hashes: 1: BA2WgwOzZPdyp1NXgiDTU34WFm4.crl (hash: cyP1qtORJrI0UVUbkvT9cThCPu6XqYIIM6O0ZMp9+os=) 2: QnYeiP_6Ur5ogI3r_rzBxb28UDk.roa (hash: 7BrFWHe6Carm6PT3HzcyCBEifHA+N+dP+9moo3lr3m4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040D968303B364F772A753578220D3537E16166E Validity Not Before: Oct 19 21:25:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5F1D5BB810C5131FFBE9D13696A504880E5C0D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a3:bf:0e:2f:37:e4:94:08:df:59:ec:1a:78: 26:eb:b8:cd:99:22:f3:b4:66:9d:37:ad:0d:48:08: a3:9d:09:5e:a5:13:ea:85:78:a5:d7:30:75:8d:0a: 99:ef:fb:8a:54:8b:0f:fc:0e:e7:ed:cc:05:5f:2a: c3:76:4f:9e:33:53:57:62:41:eb:1e:05:0e:c9:28: 04:e6:3a:37:8d:51:26:88:b9:81:07:8e:b7:04:39: 6b:08:26:25:6f:e8:76:cd:f9:2b:44:24:9b:35:16: 0c:ae:fe:57:89:24:ab:2d:5c:eb:27:18:db:b9:ad: 2a:0f:70:c0:ce:f9:b3:49:1f:d0:72:28:55:ea:58: 93:95:ba:6b:7e:ad:39:67:7a:0c:20:f1:46:89:83: 5a:22:a8:37:db:45:26:9a:d7:95:a0:6f:2c:95:a6: 76:58:54:4a:e1:51:02:e4:f8:ba:d8:1f:fb:10:c7: f1:8f:8b:fe:10:b7:6c:8e:c4:b0:f4:d0:f2:c5:91: 74:1d:65:c2:f8:59:08:0a:bc:bf:95:80:e9:84:82: 04:36:a9:c6:cc:aa:03:0f:ac:76:6a:bf:a0:28:35: 95:b9:5f:43:91:88:f1:28:a2:2e:a8:f8:cb:ce:d8: 14:21:98:d0:5d:49:60:e0:ff:5d:ea:b1:cb:bc:96: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:5B:B8:10:C5:13:1F:FB:E9:D1:36:96:A5:04:88:0E:5C:0D:20 X509v3 Authority Key Identifier: keyid:04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f1:f7:0f:c8:f5:82:8f:dd:eb:13:86:5a:8c:99:37:df:bc: ed:ef:a8:ed:ef:0b:46:77:c5:ec:3e:03:d3:06:0f:95:30:81: b0:57:79:87:4e:43:9c:67:7c:a8:50:8a:4f:de:0c:f0:4e:c5: 91:f1:72:4f:d3:72:2e:1d:d7:d8:d5:11:20:2c:e8:76:58:41: a4:48:b5:6f:ec:bb:86:e1:da:96:bf:07:04:b8:e1:75:b5:b3: 1a:c3:2d:e6:48:54:55:2e:92:78:81:43:38:ee:87:b4:7c:5a: 23:50:3d:2b:01:23:2a:68:a7:57:e3:18:4f:42:5b:90:18:b9: 00:6f:b6:89:68:8e:d3:25:71:0b:78:27:b5:f3:b1:6b:a2:16: 81:33:20:64:0f:3c:62:5c:9d:2a:38:99:45:68:f3:6f:da:76: 91:83:34:4f:c4:50:8e:76:f1:b4:5d:8f:40:35:3a:ab:d7:ab: 8c:0e:d4:48:ad:4a:90:f2:20:16:27:fd:0e:96:cd:be:cd:a2: dd:3d:b1:71:a8:65:75:e1:db:ab:49:c4:cd:f3:ea:92:e8:a7: f6:58:c5:4c:09:e1:8d:2a:94:f6:a2:ef:88:25:8c:dc:92:df: b7:52:44:c8:11:1b:74:62:2e:9d:50:e2:68:6b:ad:26:77:91: 2e:28:bc:f8 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQw RDk2ODMwM0IzNjRGNzcyQTc1MzU3ODIyMEQzNTM3RTE2MTY2RTAeFw0yNTEwMTky MTI1MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGMUQ1QkI4MTBDNTEz MUZGQkU5RDEzNjk2QTUwNDg4MEU1QzBEMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1o78OLzfklAjfWewaeCbruM2ZIvO0Zp03rQ1ICKOdCV6lE+qF eKXXMHWNCpnv+4pUiw/8DuftzAVfKsN2T54zU1diQeseBQ7JKATmOjeNUSaIuYEH jrcEOWsIJiVv6HbN+StEJJs1Fgyu/leJJKstXOsnGNu5rSoPcMDO+bNJH9ByKFXq WJOVumt+rTlnegwg8UaJg1oiqDfbRSaa15WgbyyVpnZYVErhUQLk+LrYH/sQx/GP i/4Qt2yOxLD00PLFkXQdZcL4WQgKvL+VgOmEggQ2qcbMqgMPrHZqv6AoNZW5X0OR iPEooi6o+MvO2BQhmNBdSWDg/13qscu8lrxnAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUXx1buBDFEx/76dE2lqUEiA5cDSAwHwYDVR0jBBgwFoAUBA2WgwOzZPdyp1NX giDTU34WFm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdZ VS9CQTJXZ3dPelpQZHlwMU5YZ2lEVFUzNFdGbTQuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0JBMldnd096WlBkeXAxTlhnaURUVTM0V0ZtNC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NJQU5HWVUvQkEyV2d3T3paUGR5cDFO WGdpRFRVMzRXRm00Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AEPx9w/I9YKP3esThlqMmTffvO3vqO3vC0Z3xew+A9MGD5UwgbBXeYdOQ5xnfKhQ ik/eDPBOxZHxck/Tci4d19jVESAs6HZYQaRItW/su4bh2pa/BwS44XW1sxrDLeZI VFUukniBQzjuh7R8WiNQPSsBIypop1fjGE9CW5AYuQBvtolojtMlcQt4J7XzsWui FoEzIGQPPGJcnSo4mUVo82/adpGDNE/EUI528bRdj0A1OqvXq4wO1EitSpDyIBYn /Q6Wzb7Not09sXGoZXXh26tJxM3z6pLop/ZYxUwJ4Y0qlPai74gljNyS37dSRMgR G3RiLp1Q4mhrrSZ3kS4ovPg= -----END CERTIFICATE-----Generated at Mon Oct 20 14:23:03 2025 by rpki-client